CVE-2023-2454

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with ele...

Original description

The description as published by the source.

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami postgresql

[{"type":"SEMVER","events":[{"introduced":"11.0.0"},{"fixed":"11.20.0"},{"introduced":"12.0.0"},{"fixed":"12.15.0"},{"introduced":"13.0.0"},{"fixed":"13.11.0"},{"introduced":"14.0.0"},{"fixed":"14.8.0"},{"introduced":"15.0.0"},{"fixed":"15.3.0"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2023-2454 postgresql-13 Fixed in: 13.11-0+deb11u1

References

advisory access.redhat.com
advisory postgresql.org
web security.netapp.com
web nvd.nist.gov